{"id":29502,"date":"2021-08-03T05:28:10","date_gmt":"2021-08-02T18:28:10","guid":{"rendered":"https:\/\/www.kaspersky.com.au\/blog\/malware-link-under-the-picture\/29502\/"},"modified":"2021-08-03T05:28:39","modified_gmt":"2021-08-02T18:28:39","slug":"malware-link-under-the-picture","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com.au\/blog\/malware-link-under-the-picture\/29502\/","title":{"rendered":"E-mail with a malicious link"},"content":{"rendered":"
When a conversation touches on credential theft, e-mail messages with phishing links tend to come up first. However, those messages represent just one means of obtaining user names and passwords for various online services. Scammers still mail links to spyware regularly, too. One trick they use to disguise those links is including an image that appears to be an attachment.<\/p>\n
E-mail with a malicious link<\/h2>\n
Today, we\u2019re looking at a targeted e-mail attack. The cybercriminals in question made their e-mail look credible, sending an RFQ (request for quotation) to a provider of industrial services and equipment vendor, with guidelines attached.<\/p>\n
Industrial companies receive such requests fairly often, and account managers will typically open the guideline document and prepare a proposal, glossing over any slight discrepancies such as differences between the domain name and the sender\u2019s signature. What we are interested in, here, is how cybercriminals get recipients to run the malware. Here\u2019s what the e-mail looks like.<\/p>\n
![\"A](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/102\/2021\/08\/03052820\/malware-link-under-the-picture-letter.jpg\")
<\/a>![\"Authentic](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/102\/2021\/08\/03052828\/malware-link-under-the-picture-attachment.jpg\")
<\/a>![\"An](\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/102\/2021\/08\/03052837\/malware-link-under-the-picture-image.jpg\")
<\/a>